Cellini Design Center Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have shopped with or worked for Cellini Design Center may now face uncertainty about whether their personal or financial details sit among files claimed to have been taken. Public reporting does not yet confirm how many individuals are involved or exactly which records left the company’s systems, yet the listing of the firm by a ransomware group is enough to put customers, staff and partners on alert.

On 19 October 2025 the Singapore-based online furniture retailer was named on the leak site of the qilin ransomware group. The group claims that internal files were exfiltrated during a ransomware attack. No independent confirmation of the volume or full contents of the data has been published, and the number of people affected remains unknown.

What happened

According to the available record, Cellini Design Center was listed by the qilin ransomware group on 19 October 2025. The group asserts that internal files were taken as part of a ransomware operation. Timing of the initial intrusion, the precise method used, the scale of any encryption, and any ransom demand are not disclosed in the public facts. The number of people whose information may be involved is also listed as unknown. What is stated is simply that internal files were exfiltrated and that the organisation appears on the group’s leak site.

The group behind it: qilin

Qilin is a ransomware operation that has been active for several years and is widely documented as operating a ransomware-as-a-service model. Affiliates typically gain access to corporate networks, move laterally, exfiltrate data, and then deploy encryption while threatening to publish the stolen material if payment is not made. The group maintains a public leak site on which it lists victims and, in many cases, releases sample files or full archives. Its tactics follow the double-extortion pattern common among contemporary ransomware crews: pressure comes both from operational disruption and from the threat of data exposure. Public reporting has linked qilin to attacks across multiple sectors and regions; the listing of any single organisation, including Cellini Design Center, remains a claim by the group until independently verified.

Cellini Design Center and its sector

Cellini Design Center is a Singapore-based online furniture retailer that sells designer home furniture across categories such as living-room, dining-room and related pieces. Businesses of this type routinely hold customer order histories, delivery addresses, contact details, payment-related records, supplier contracts, employee information and internal operational documents. In the e-commerce furniture sector, a compromise can therefore touch both consumer privacy and the commercial relationships that keep the business running. Because the company operates online and serves retail customers, any exposure of internal files carries potential consequences for people who have never had reason to think about cybersecurity until their own data appears at risk.

What was likely exposed

The public facts state only that internal files were exfiltrated in a ransomware attack. Exact data types, file counts and whether customer, employee or financial records are among them have not been disclosed. Organisations in the online retail furniture sector typically store names, email addresses, shipping addresses, purchase histories, payment tokens or invoices, staff HR files and supplier correspondence. Until the contents of the claimed archive are independently confirmed, it is not possible to state with certainty which of these categories, if any, left Cellini Design Center’s systems. The absence of a confirmed inventory means affected individuals cannot yet know the precise scope of their exposure.

Why it matters

If customer or employee records are among the internal files, those individuals face the ordinary risks that follow any unauthorised release of personal data: targeted phishing, identity fraud, or misuse of addresses and contact details. For the organisation itself, the incident can disrupt operations, damage supplier and customer trust, and trigger regulatory scrutiny under Singapore’s personal-data protection rules. Because the number of people affected remains unknown and the full contents of the files are unconfirmed, the practical impact is still emerging. Even limited internal documents can contain enough identifying information to enable further social-engineering attacks against staff or clients.

What to do if you're exposed

Anyone who has ordered from, worked for, or supplied Cellini Design Center should treat the listing as a prompt to take basic protective steps while waiting for clearer confirmation of what was taken.

• Monitor bank and card statements for unfamiliar charges and enable transaction alerts where available.
• Change passwords on any accounts that reused credentials linked to Cellini orders or staff logins, and turn on multi-factor authentication.
• Be alert to phishing emails or messages that reference recent furniture purchases or internal company matters.
• Consider placing a fraud alert with relevant credit-reporting agencies if you believe financial details may be involved.
• Run a free exposure scan of your email address against known breach data sets to check whether your information has already appeared in other incidents.

Public detail remains limited; further verified information from the company or independent researchers will clarify the true extent of the exposure. Until then, measured caution is the most useful response.

AICompiled with AI assistance from public sources and published under our editorial standards.